The Johns Hopkins Health System Corporation

Johns Hopkins University Health System Corporation notified the NH AG of a MOVEit file transfer vulnerability exploited on May 29, 2023. Unauthorized access led to document downloads affecting 47 NH residents. Notification letters were mailed June 23, 2023, offering credit monitoring. The vendor Progress Software disclosed the zero-day vulnerability on May 31, 2023.

Affected (this filing): 47

Johns Hopkins Health System Corporation reported to HHS on 2023-07-31 a Hacking/IT Incident affecting 2584 individuals. Breached information located on Network Server. The incident involved a malware attack compromising PHI (names, addresses, birthdates, treatment info). The CE provided credit monitoring and implemented technical safeguards.

Affected (this filing): 2,584